Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GPEOwX9_TLuqs2yYKpTvFzYOJG8.roa
File: GPEOwX9_TLuqs2yYKpTvFzYOJG8.roa (raw, json)
Hash identifier: smTYjbubCt/lwDvA55dbi2H0ipCLvlPs5+EJsMCpmXQ=
Subject key identifier: 18:F1:0E:C1:7F:7F:4C:BB:AA:B3:6C:98:2A:94:EF:17:36:0E:24:6F
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018B68E0AAE57988540047B21109A1C3D75D
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GPEOwX9_TLuqs2yYKpTvFzYOJG8.roa
Signing time: Wed 25 Oct 2023 22:07:16 +0000
ROA not before: Wed 25 Oct 2023 22:07:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:e0:aa:e5:79:88:54:00:47:b2:11:09:a1:c3:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 25 22:07:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18f10ec17f7f4cbbaab36c982a94ef17360e246f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:74:84:16:52:b6:11:57:09:1a:50:cd:21:1d:
a3:7b:c6:4a:70:e1:c8:ee:e6:53:f6:8a:4d:71:c2:
c9:13:f7:ef:87:12:a4:3b:d5:b0:1e:89:6a:02:1a:
b1:c9:e3:75:6a:67:d2:c0:e6:63:a1:19:1b:ac:64:
cb:5c:f3:0e:7f:05:02:1c:f5:a1:9c:35:96:2c:f3:
a4:87:83:7f:01:6d:f0:9d:c1:fb:39:29:4d:b8:d3:
55:09:b8:ee:91:08:b6:1d:2c:f4:6d:ce:70:72:3f:
03:9c:1f:15:eb:af:b5:d8:e2:2f:38:87:dc:fc:12:
20:27:22:9b:67:12:87:68:9a:7c:a2:db:29:2f:f3:
a4:9c:2f:f6:39:28:85:92:c0:79:e4:63:3f:19:c4:
61:92:12:06:52:6e:de:09:fb:c3:16:30:9f:84:04:
b0:3c:32:9a:86:83:f0:b6:02:18:8d:6c:84:1f:b2:
77:cf:e8:3b:a0:30:e1:45:d3:2e:4a:3c:e4:9e:45:
f6:a9:83:7a:ba:bb:58:cd:cf:4b:dc:98:c4:5d:0f:
e3:8b:ab:ae:d7:fe:48:bb:19:0c:9c:d6:90:b1:b7:
4c:9e:a0:4b:f1:a8:f6:65:53:ef:f0:11:89:d8:b3:
3f:63:7e:39:3d:17:05:07:ec:a4:d4:57:bd:b3:e4:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:0E:C1:7F:7F:4C:BB:AA:B3:6C:98:2A:94:EF:17:36:0E:24:6F
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GPEOwX9_TLuqs2yYKpTvFzYOJG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
94.154.32.0/22
94.154.37.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
b2:d4:0d:96:47:46:96:aa:26:4a:1e:d5:7d:a3:99:d6:cb:a4:
07:91:11:4c:7e:43:7c:d7:14:15:08:46:0e:f9:9c:9c:a7:22:
12:55:ea:dc:d7:47:3b:4b:74:72:7c:14:8e:30:3e:db:3f:5a:
5a:6e:77:57:35:a5:2a:94:83:b2:db:aa:86:4d:21:a7:0a:8e:
48:15:67:75:7c:06:25:b5:7b:fa:aa:22:cc:e2:21:97:9f:35:
30:fb:ff:26:24:b2:8c:cf:ec:87:8a:fc:82:2e:75:4a:f1:55:
82:c0:87:24:44:38:21:4f:6f:d6:0e:9e:94:44:c4:12:d8:cb:
75:19:ff:60:0f:cf:e7:31:c9:20:62:cc:d7:98:ba:3c:b9:50:
3a:d6:36:27:55:43:6f:d4:8a:32:7b:18:dd:25:b2:3f:5a:66:
77:15:a3:08:48:cc:1a:76:39:45:62:e4:27:fa:9f:76:41:1c:
6f:63:f0:41:88:83:98:fa:d5:6e:27:07:31:96:96:90:6a:85:
bb:99:0b:9a:9b:21:32:7f:2f:c1:ac:a5:26:d0:bc:01:6c:e2:
3f:a6:db:af:00:f0:cf:12:7c:64:25:e7:b1:02:20:27:d0:fb:
71:70:f0:b4:ba:a6:2c:3f:30:57:13:12:6b:73:e7:53:57:79:
f0:ca:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 18:43:28 2023 by rpki-client on console-ams.rpki-client.org